Privacy Policy
Effective date: June 28, 2026
Last updated: October 3, 2026
Kotalis provides a marketplace and listing platform that allows users to create accounts, publish listings, browse content, communicate, save favorites, receive notifications, report content, and use related services.
This Privacy Policy explains what information we collect, how we use it, how we share it, how long we keep it, and how users can request access, correction, or deletion of their information.
1. Information We Collect
Account information:
- Name
- Email address
- Phone number
- Profile photo
- Authentication information
- Account preferences
- Verification or trust status
Listings and user content:
- Listing titles and descriptions
- Categories, prices, availability, and listing details
- Uploaded images and media
- City, province, address, or other listing location information
- Poster profile information
- Happenings or event-related content
- Comments and ratings
- Favorites, bookmarks, likes, and other engagement actions
Some user content may be visible to other users, including listing details, listing images, public profile information, poster information, and other marketplace content.
Messages and communications:
If chat or messaging features are available, we may process messages between users, message timestamps, conversation metadata, and attachments or images shared in chat if supported.
Notifications:
To send notifications, we may collect device notification tokens, including Firebase Cloud Messaging tokens, notification preferences, and notification delivery or interaction data.
Safety, moderation, and trust data:
To protect users and keep the platform safe, we may collect reports submitted by users, blocked user records, moderation decisions, abuse, fraud, safety-related records, account deletion logs, and account status logs.
Technical and diagnostic data:
We may collect device type, app version, operating system, crash reports, performance diagnostics, error logs, and usage events needed to improve reliability and security.
Kotalis may use Firebase, Google Cloud, Firebase Crashlytics, Firebase Performance, or similar service providers to process technical and diagnostic information.
Payments and boosts:
On supported Android devices, Kotalis Pro subscriptions and paid boosts for listings or happenings are purchased through Google Play. Google Play processes the transaction, while RevenueCat helps retrieve product information and manage purchases and entitlement status. Kotalis and its payment service providers process purchase history linked to your account, including product and transaction identifiers, purchase dates, and purchase, subscription or entitlement status. This information is used to provide and restore paid features, manage accounts and boost credits, understand purchase activity, prevent fraud and resolve payment issues. These records are not processed only temporarily. Their retention is described below. Kotalis does not receive or store full payment card details.
Paid digital features may not be available on every platform, in every region, or for every account or content item. Prices, billing periods and renewal terms are shown before purchase. Subscriptions are managed through Google Play.
2. How We Use Information
We use information to create and manage user accounts, authenticate users, display, manage, and moderate listings, enable messaging and communication, save favorites, bookmarks, and likes, send notifications, provide customer support, detect fraud, abuse, spam, or unsafe behavior, enforce our Terms of Service, improve app performance, stability, and user experience, and comply with legal obligations.
3. Sharing of Information
We do not sell personal information.
Authorized administrators may review reports, reported content and information needed to resolve them. An automated word and expression filter may reject a comment before publication and inform its author through a private notification. Rejected comments are not public, but their text can remain accessible to their author and authorized administrators. To request a review, contact support@kotalis.app.
We may share information with service providers that help us operate Kotalis, including Firebase and Google Cloud, hosting and storage providers, notification providers, analytics, crash and performance tools, Google Play and RevenueCat for paid digital features, and customer support or security tools.
We may also disclose information if required to comply with law, protect users or the public, investigate fraud or security incidents, or enforce our Terms of Service.
4. Public Content Visibility
Some information you provide may be visible to other users, including listing content, listing images, poster profile information, public names or profile photos, happenings, published comments or public marketplace content, and contact or business information that you choose to publish.
Do not post personal information that you do not want other users to see.
5. Location Information
Kotalis may use location-related information such as city, province, address, or listing location to show relevant content.
If device location permissions are requested, you may allow or deny access through your device settings.
6. Data Retention
We retain information only for as long as necessary to operate the service, comply with applicable obligations, resolve disputes, prevent fraud and maintain platform safety. Account deletion removes or anonymizes ordinary account data as described below.
Some purchase and subscription records, reports, moderation decisions and security or deletion records may remain where necessary for accounting, applicable legal obligations, disputes, fraud prevention or abuse investigations. Access to these records is restricted. Retention depends on the record and the reason for keeping it; it is not a promise that all records disappear immediately or within the request-processing period. Contact support@kotalis.app to ask which records remain in your case and why. Verified requests concerning our processors are handled subject to their applicable retention requirements.
7. Account and Partial Data Deletion
You can request account deletion in Kotalis through Profile > Security > Delete my account, or by emailing support@kotalis.app from the address associated with your account where possible. We may verify account ownership. Never send your password or an SMS verification code.
Account deletion removes or anonymizes your account and profile information, notification tokens, preferences and associated interactions. Your listings and happenings are removed from public access and their personal data and owned media are cleaned up. Your comments are deleted. The content of messages you sent is removed and replaced with a deleted-message marker; messages sent by the other participant are preserved. Necessary shared conversation references and the restricted records described under Data Retention may remain. A deletion request is processed by the server and may not complete instantly.
You can also request deletion of specific personal data without closing your account: email support@kotalis.app with the subject "Partial data deletion request" and describe the data concerned. We verify the request and process it manually. Any necessary retention or limitation will be explained in our response.
Deleting your Kotalis account does not cancel a Google Play subscription. Manage or cancel it separately in Google Play. Canceling the subscription is not a prerequisite for deleting your account. Google Play, RevenueCat or Kotalis may retain necessary transaction records as explained above.
Account and partial data deletion information: https://kotalis-1q8rqu-legal.web.app/account-deletion
8. Security
We use reasonable technical and organizational measures to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Users are responsible for keeping their account credentials confidential.
9. Children
Kotalis is not intended for children under the minimum age required by applicable law. If we learn that we collected information from a child without required consent, we will take appropriate steps to delete it.
10. International Processing
Your information may be processed in countries where Kotalis or its service providers operate. These countries may have different data protection laws than your country.
11. Your Rights
Depending on your location, you may have rights to access your information, correct inaccurate information, delete your account or personal data, object to certain processing, or request information about how your data is used.
To make a request, contact support@kotalis.app.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we may notify users through the app or by other appropriate means.
13. Contact
For privacy questions or requests, contact:
support@kotalis.app
Web version:
https://kotalis-1q8rqu-legal.web.app/privacy
Manual identity verification
If you choose to request identity verification, Kotalis processes the name on your document, the document type, a photo of the document and a selfie, with your prior consent. Authorized administrators visually compare these elements. This process does not perform automated facial recognition and does not guarantee that a document is authentic.
The photos are held in private Google Cloud storage, separate from public media. Access goes through the server and is restricted to authorized administrators handling the review. The photos are not published on your profile. Only verification status may be displayed publicly, separately from a Pro subscription and Kotalis team membership.
Photo deletion is scheduled 30 days after the decision, or after 60 days if a request remains unprocessed. An unfinished upload expires after one day. Cancellation or account deletion also triggers cleanup. Processing is performed by the server; a technical incident may delay execution and result in retries. The name collected for this review is deleted with the evidence. Status and a minimal decision record may be retained for security, disputes and abuse prevention, in accordance with the Data retention section.
You may cancel a pending request in the app or request access, correction or deletion of these data at support@kotalis.app. Do not email identity documents: use only the secure process offered in the app.